Route Origin Authorization
$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/2/3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa
File: 3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa (raw, json)
Hash identifier: Umq7Ql+Pkn8jDcQwaeyklFGf0C+VYDnY209ulmiIH9M=
Subject key identifier: BF:2C:10:24:34:1A:BA:5F:A1:E4:88:FC:8F:B4:9A:CA:1E:08:91:57
Certificate issuer: /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
Certificate serial: 3775275938443705EBE73FAA36780BB16D674822
Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
Subject info access: rsync://rpki.cernet.edu.cn/repo/cernet/2/3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa
Signing time: Tue 24 Feb 2026 06:30:01 +0000
ROA not before: Tue 24 Feb 2026 06:25:01 +0000
ROA not after: Tue 23 Feb 2027 06:30:01 +0000
asID: 4538
IP address blocks: 103.165.110.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:75:27:59:38:44:37:05:eb:e7:3f:aa:36:78:0b:b1:6d:67:48:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
Validity
Not Before: Feb 24 06:25:01 2026 GMT
Not After : Feb 23 06:30:01 2027 GMT
Subject: CN=BF2C1024341ABA5FA1E488FC8FB49ACA1E089157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:a2:87:46:e6:2d:89:c9:09:99:68:88:94:
05:c5:dc:f8:c1:be:53:97:4e:56:87:66:48:ef:45:
64:e1:e4:d6:6e:49:f7:f4:23:35:e4:33:73:25:e6:
43:6d:cd:4f:40:cd:ed:a6:8a:74:8a:a7:20:6b:00:
42:81:36:43:3d:d1:89:68:95:52:96:08:03:d0:12:
9e:13:df:b1:65:08:f0:a4:cf:90:7e:82:59:01:a4:
91:14:eb:bf:8b:80:9a:9f:d6:51:bd:b0:23:2d:31:
4a:40:76:f0:6f:92:59:41:e5:17:ab:d4:de:6e:8d:
6a:35:5c:7f:47:b2:06:b1:65:f8:f9:42:cb:37:da:
f6:81:1d:ae:49:d4:27:6b:67:3b:27:40:69:3a:92:
3a:b6:59:b3:ba:10:8d:56:9d:d5:83:f8:0d:e0:f4:
a9:6b:d9:19:d5:36:18:b5:22:02:19:36:c3:0c:f5:
5a:e8:b3:5e:09:22:eb:64:9b:bd:11:b7:fa:5e:d5:
de:b9:56:18:6c:19:d3:d3:9a:f5:4b:4e:1f:5f:ca:
b7:fa:41:50:05:a8:d0:77:c2:c0:a0:f7:ab:c9:da:
45:7d:ff:5a:30:a5:b4:3f:ad:b9:08:e8:13:d5:2a:
d7:7f:0e:d6:d9:a5:47:32:74:1f:5c:d4:59:8b:c0:
bb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2C:10:24:34:1A:BA:5F:A1:E4:88:FC:8F:B4:9A:CA:1E:08:91:57
X509v3 Authority Key Identifier:
keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.165.110.0/24
Signature Algorithm: sha256WithRSAEncryption
60:2c:f6:2d:71:71:8a:b0:3f:ef:fb:e2:36:90:98:80:bb:3f:
05:c6:19:98:f5:8c:c7:fc:09:dc:88:30:13:83:14:2d:99:9a:
73:ff:c1:02:fb:06:5f:17:65:4b:97:54:39:30:9c:14:98:e7:
61:10:4a:6c:8d:9d:af:0a:5c:cd:7b:86:eb:b6:ff:a2:12:55:
e0:bd:64:5a:27:27:63:a3:2a:21:bc:bc:d1:01:93:25:11:31:
7b:45:09:89:ce:7e:dc:63:81:e6:d2:3b:c7:e8:3b:35:a1:6e:
01:79:9f:4a:d1:77:a3:1d:83:46:1f:a8:99:42:1a:23:92:f7:
32:d3:42:c7:7e:aa:62:5e:16:be:c9:a2:e8:3b:eb:96:d6:70:
71:c2:20:49:4a:d1:bc:48:ec:bb:83:bc:b4:44:87:31:75:76:
d1:f6:7c:77:27:f1:75:1e:99:b7:fe:04:e0:d6:29:e3:48:fe:
b7:f3:c0:c7:74:f7:37:d6:ea:e3:4b:b3:ff:3b:b0:a8:31:ec:
02:93:43:1b:0f:24:2f:75:62:21:05:8c:5a:7b:3c:2b:f0:8b:
69:a3:87:84:ad:07:ef:c0:9b:9b:cc:48:26:fb:2a:a2:de:79:
64:61:e6:22:32:48:20:e1:6e:51:7f:b7:ce:86:52:72:80:a3:
14:55:39:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:49:41 2026 by rpki-client